Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
File:                     ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa (raw, json)
Hash identifier:          Z1JDumT3CznlNToUVfok00SGVbV2zC4QEnJRMo26jK8=
Subject key identifier:   27:2B:C3:0F:A5:CF:10:B4:8B:FE:95:F5:37:45:9A:85:AA:23:12:D2
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F4328584882809871A53950B3BB7E58A0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:98:71:a5:39:50:b3:bb:7e:58:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=e58da1fc-5118-4e98-af11-fccd68d7ac26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:43:22:f0:0a:d6:56:0b:5e:2f:da:86:05:
                    1c:3b:74:81:bc:a1:13:52:26:83:c5:2e:4c:8d:ca:
                    27:db:ca:eb:7b:c9:80:4c:a7:ba:a2:1d:25:2a:f8:
                    2a:f1:c5:cc:88:25:76:8e:c1:da:ec:0c:42:b5:ba:
                    3f:ee:89:2a:53:81:71:1a:44:12:37:52:f9:77:7d:
                    cf:7b:12:26:16:5a:bb:dc:fb:f4:36:fd:5b:51:ca:
                    a4:e5:1e:a2:3d:de:9e:6b:b3:54:4a:c3:a0:59:a9:
                    a9:db:99:ec:4b:4d:89:5e:fa:75:0b:d3:ff:dc:72:
                    98:cf:4f:a1:18:24:df:1c:eb:2b:bf:25:d9:19:e1:
                    e1:bf:90:09:36:5b:bf:c2:aa:54:a1:08:14:a8:dc:
                    de:77:7e:e3:ed:64:34:9a:73:81:03:5c:fa:f7:49:
                    57:b8:f9:29:c5:52:4b:ad:c6:f4:23:8f:51:84:a2:
                    76:2a:3f:ef:9d:42:ec:9b:9c:b4:1b:0e:5d:4b:2b:
                    74:91:ce:3d:d4:61:1c:9c:36:71:7c:76:27:f7:31:
                    d6:8a:46:e2:a2:db:88:d5:2d:b8:95:e4:7a:7d:5f:
                    9f:bf:d6:f3:15:c6:07:81:11:59:44:97:75:1d:5a:
                    de:4f:3b:95:ab:30:e6:19:c0:d7:2a:7f:d3:ad:81:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2B:C3:0F:A5:CF:10:B4:8B:FE:95:F5:37:45:9A:85:AA:23:12:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/ab9f3d89-4e74-3c9c-9562-b94ed6d2fb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fb:78:5d:58:f8:ae:b6:51:9f:0a:05:8d:fe:f4:99:62:4b:
         0f:c9:a5:32:9d:58:a6:45:72:f1:84:68:4a:97:1e:34:8b:e9:
         11:c4:0e:c0:66:66:89:3f:71:9a:d7:c7:9d:a3:c2:68:4f:90:
         e0:eb:3b:a8:e1:27:bf:85:7e:f4:eb:6d:87:42:56:ba:0e:d5:
         51:a6:2e:0c:da:ce:f1:60:c1:58:aa:9e:42:bb:d3:c0:10:25:
         cd:32:f2:4e:6f:b6:2a:01:8b:da:8e:d6:31:b2:f2:00:c4:6b:
         0b:f0:c9:78:c8:6c:0d:ab:13:bd:60:2a:e3:f3:f5:fc:0b:54:
         00:ba:22:14:e5:4b:09:a8:d6:bd:0d:f8:71:a2:9b:ab:9f:58:
         62:6b:7d:2f:ad:7b:3e:8a:b6:2a:e0:3d:65:d9:48:71:7e:90:
         ac:ff:14:24:b0:e7:ac:01:13:81:13:9f:35:a2:a5:99:1a:09:
         f4:cc:ba:a5:3e:2b:18:51:16:10:4b:60:f7:51:31:e0:46:da:
         2b:46:c1:03:15:ec:48:49:7f:b1:6e:0f:a0:62:25:83:3b:53:
         c0:5c:eb:f1:46:5c:61:b2:e1:4e:f4:12:42:c5:7a:54:76:13:
         6a:13:3f:87:7e:92:3b:39:dc:71:ad:37:ad:2c:84:05:a9:1a:
         7b:77:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:25 2025 by rpki-client